Properly escape user provided data in trans with data to prevent possible XSS attack vectors.

This commit is contained in:
Jan Böhmer 2023-02-26 00:52:00 +01:00
parent 6ff60e556e
commit 5f39d8e594
3 changed files with 3 additions and 3 deletions

View file

@ -67,7 +67,7 @@ class PartDataTableHelper
'<a href="%s">%s%s</a>',
$this->entityURLGenerator->infoURL($context),
$icon,
htmlentities($context->getName())
htmlspecialchars($context->getName())
);
}